Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
File: jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft (raw, json)
Hash identifier: Axdgg59iAM7HVxSwNeNXc8uYzvVA8iSkI5AZzDkHMW8=
Subject key identifier: 2D:47:B2:8E:D1:9D:51:29:47:33:41:F9:90:02:51:BC:D4:27:BE:60
Authority key identifier: 8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
Certificate issuer: /CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Certificate serial: 019D38D35C69A42E6B17C2BBE5BF53817350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
Manifest number: 159F
Signing time: Sun 29 Mar 2026 09:01:08 +0000
Manifest this update: Sun 29 Mar 2026 09:01:08 +0000
Manifest next update: Mon 30 Mar 2026 09:01:08 +0000
Files and hashes: 1: RXn30h9BpJvoZDBG_VhKAWNPT5w.roa (hash: e20aIXT8+TI5fnLf21yjBd8FPloZZbocy7TNGbWjDGk=)
2: eiBAjPlDdAEJJvNoTH-1fALVwBg.roa (hash: tHK9gw0NecINRkXtDNFXNpkwOaFhBnt8zEFuvT1+in8=)
3: jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl (hash: tz/jFrT+a1o75uwQnjAH+wjQ6f948P4m1xI7n2uShRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:5c:69:a4:2e:6b:17:c2:bb:e5:bf:53:81:73:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Validity
Not Before: Mar 29 09:01:08 2026 GMT
Not After : Mar 30 09:01:08 2026 GMT
Subject: CN=2d47b28ed19d5129473341f9900251bcd427be60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:46:7e:b1:9d:86:e3:c2:50:92:f3:d2:35:fc:
d7:47:c7:8f:cf:cc:97:ba:4a:4a:10:4b:6d:43:4c:
e7:bc:96:c3:d8:bf:6f:9c:37:ae:5e:d2:c2:53:7b:
ab:93:a1:30:2f:5d:e8:a7:b2:67:15:b2:b0:b5:be:
73:04:e3:be:54:a9:c4:16:67:c2:dd:3e:4c:52:b9:
ca:f7:ab:93:18:5a:79:ea:6c:17:cf:04:6c:64:b5:
6b:63:ef:ef:70:9d:20:73:5b:ea:1c:00:af:95:a2:
39:92:62:8a:84:2a:c3:a9:13:21:9f:f3:3f:68:5d:
54:05:f0:15:8b:08:8e:01:2a:64:d5:a6:70:2c:a1:
b2:51:67:71:69:8f:1e:28:06:6c:a3:e2:98:b5:fa:
3f:50:a9:74:66:78:5d:e3:25:fe:ff:12:44:67:df:
96:d9:ef:1d:9e:ae:eb:98:53:a9:49:8d:83:d8:fe:
0e:49:51:9e:31:d5:39:62:8f:a0:c5:5a:36:69:44:
2d:cd:c4:e0:79:84:62:2b:b2:2e:79:bb:5b:86:e1:
7c:a7:59:c6:d6:de:86:05:65:9f:87:25:c1:a0:52:
7e:4b:d3:63:1b:01:95:86:4e:1a:75:75:50:18:20:
8a:34:6a:77:00:8e:cf:83:0c:d6:14:f2:66:8f:34:
3f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:47:B2:8E:D1:9D:51:29:47:33:41:F9:90:02:51:BC:D4:27:BE:60
X509v3 Authority Key Identifier:
keyid:8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:1d:2c:35:bc:05:f4:b3:20:fa:74:2a:3c:13:de:55:b4:2b:
58:5d:c0:5f:45:a1:d9:42:4f:28:db:46:70:2e:2d:d7:cf:ce:
c8:b7:fe:ce:6f:9f:3b:e2:ac:8d:97:51:8b:d1:18:1d:f3:4a:
17:55:49:18:8c:a5:dd:54:d9:63:6b:47:6c:ee:53:71:b5:d0:
bb:d5:6b:02:f4:79:48:ad:ad:e9:7f:55:74:7a:82:d3:e2:37:
a4:c5:2f:57:e8:0c:dd:b4:65:8e:17:2e:88:7d:4a:6b:da:02:
fc:33:3c:ac:29:b2:11:cc:6b:11:d9:65:d5:9b:0a:da:fe:a3:
f8:ba:84:e2:5b:1c:a7:2a:f8:eb:2d:b5:84:e1:7c:22:31:09:
a9:28:77:12:32:15:5e:b5:ba:ad:32:80:82:5e:4a:73:cb:b9:
72:f8:b7:3e:66:be:8b:14:af:a7:92:81:4a:df:08:44:e9:ab:
a1:c5:c3:38:ee:fb:cd:2d:c6:7a:97:95:56:49:75:96:b7:cc:
01:74:d0:fc:d7:92:f1:fb:6b:16:31:44:0a:b7:84:56:e0:27:
49:79:00:0c:6a:c3:56:8e:1e:fd:5e:c1:6a:e6:92:6d:d8:dc:
30:06:0e:48:e6:60:91:e0:ea:d8:da:79:e6:0f:19:1f:16:66:
96:ec:b8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:31 2026 by rpki-client